CVE-2006-5585: The Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local users to gain...

Security readout for executives and security teams

CVE-2006-5585 is a local privilege escalation issue in Microsoft Windows XP SP2 and Windows Server 2003. A user already able to run code on the machine could use a malformed application manifest to gain higher privileges through the Client-Server Run-time Subsystem. Exposure is most likely limited to legacy Windows XP SP2 or Windows Server 2003 systems where MS06-075 status is unknown or absent. Handle this as a legacy-system risk. It is not remotely exploitable from the provided description, but affected systems may let a low-privileged user become more powerful on business-critical hosts. Mitigation focus: Verify whether Microsoft MS06-075 applies to any remaining affected hosts.; Apply the Microsoft security update referenced by MS06-075 where applicable.; Prioritize removal or isolation of legacy XP and Server 2003 systems..

Prepared

Jun 29, 2026, 08:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.